Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: XNBJm7G4AyXJdluJi1u/8nUVNLWthTqa4zNf9IGwx0c=
Subject key identifier: 74:D3:E6:E8:3C:30:C6:8C:E7:A6:1C:02:8A:2E:2A:FB:4B:37:C6:94
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 019357D251802037C06C3A020D73EDF704D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: 6BtmlVaDH1V4i8ojs8RLnDocnqw.roa (hash: a+Oz4QhPTz99vKZtbSitHgmQEwUYeaApMKWe60MLdIw=)
2: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: Hlood4/j/ccr22sFLYqv6Qks7zwTU+1XxYZYdE0/KJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:51:80:20:37:c0:6c:3a:02:0d:73:ed:f7:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=74d3e6e83c30c68ce7a61c028a2e2afb4b37c694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:3b:fb:28:eb:13:ea:ca:e8:71:66:66:64:
98:59:f7:eb:32:e5:02:5b:a0:73:9f:e7:04:75:5a:
0b:e4:cf:78:35:99:2d:a6:28:d5:f0:3c:12:6b:0d:
65:16:18:3b:f3:a3:e4:89:dc:df:d1:77:0f:c3:1a:
70:fb:e8:b8:10:c6:85:b9:ed:93:53:23:b3:c5:b9:
33:4d:e4:cb:f8:93:ac:70:05:85:e2:f6:a2:e7:6c:
69:99:8b:4d:1b:76:6f:ea:df:d8:43:f7:14:41:db:
00:b9:b4:ec:72:78:e2:60:3f:38:3c:bd:3e:a6:53:
b4:86:d2:ee:a3:28:b5:49:fe:3c:b4:54:79:0d:2b:
4b:2c:d0:00:b2:c9:59:15:ba:2d:9c:d0:38:94:7d:
e8:22:a0:bf:1c:b7:23:58:df:d6:91:fe:07:07:25:
80:81:95:67:1b:98:f9:cd:b1:98:32:7f:00:e9:9f:
c8:d6:7b:9b:72:f5:99:5e:ba:94:fb:ad:15:a8:f3:
59:9f:71:33:55:90:b9:40:d6:b3:95:a2:7e:be:ac:
63:67:58:b8:66:34:ab:b4:79:d8:2b:20:d5:22:67:
e4:a3:79:e8:55:51:f8:f0:7e:12:42:c1:d1:3c:7b:
b0:9e:82:be:b9:62:63:4d:27:73:47:da:b4:8c:65:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:E6:E8:3C:30:C6:8C:E7:A6:1C:02:8A:2E:2A:FB:4B:37:C6:94
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9c:40:06:74:da:e5:8b:41:5c:f4:e3:b4:86:48:1f:de:f0:
2f:84:7c:e6:a1:fe:45:9c:00:8e:f2:bf:02:5d:73:ad:53:5d:
1e:c9:ef:a7:3b:0e:f3:f3:1e:13:2e:ce:49:1a:99:68:9a:62:
7c:89:04:7b:19:7c:dd:8a:08:13:54:90:a1:e1:ea:cb:29:da:
72:fc:33:e7:13:41:d0:3e:74:da:21:6a:50:79:06:83:e6:30:
7a:1a:00:fe:4a:c7:8f:9d:d9:30:c6:a9:e4:7f:d2:b8:8c:07:
4e:e9:81:e7:35:23:cb:02:4e:26:e1:e6:f3:15:ed:4e:c9:a2:
bb:20:e6:4a:72:5b:de:ed:d7:a6:96:0e:90:26:45:6e:32:fb:
9a:7c:18:b0:91:9a:31:b9:35:98:d4:54:3c:5c:eb:a7:88:9e:
94:9f:de:5c:91:a3:be:54:91:c8:54:2d:62:bc:86:91:5f:c8:
77:ab:e2:c3:25:78:bd:7c:4d:f8:e1:10:d2:ef:22:b5:8d:52:
76:1f:3e:22:9c:b7:43:b7:a3:39:cf:2b:20:44:c4:3f:44:c9:
a8:9d:b5:ee:48:08:07:fd:f0:27:be:44:3f:bf:f7:4c:0c:9d:
96:10:fb:67:be:b4:bf:5f:88:65:0a:52:e2:1c:96:75:98:75:
6d:e5:1d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0lGAIDfAbDoCDXPt9wTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkN2JiMDA0MjAxZmQwNWI0OWQxMjIxZmNlNDc1OWVhNzBi
ZWM2ODQwHhcNMjQxMTIzMDcwMDIxWhcNMjQxMTI0MDcwMDIxWjAzMTEwLwYDVQQD
Eyg3NGQzZTZlODNjMzBjNjhjZTdhNjFjMDI4YTJlMmFmYjRiMzdjNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7k7+yjrE+rK6HFmZmSYWffrMuUC
W6Bzn+cEdVoL5M94NZktpijV8DwSaw1lFhg786Pkidzf0XcPwxpw++i4EMaFue2T
UyOzxbkzTeTL+JOscAWF4vai52xpmYtNG3Zv6t/YQ/cUQdsAubTscnjiYD84PL0+
plO0htLuoyi1Sf48tFR5DStLLNAAsslZFbotnNA4lH3oIqC/HLcjWN/Wkf4HByWA
gZVnG5j5zbGYMn8A6Z/I1nubcvWZXrqU+60VqPNZn3EzVZC5QNazlaJ+vqxjZ1i4
ZjSrtHnYKyDVImfko3noVVH48H4SQsHRPHuwnoK+uWJjTSdzR9q0jGXGGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTT5ug8MMaM56YcAoouKvtLN8aUMB8GA1UdIwQY
MBaAFJ17sAQgH9BbSdEiH85HWepwvsaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmIt
ZTliZWRlMDBjNmFmLzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmItZTliZWRlMDBjNmFm
LzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZxABnTa
5YtBXPTjtIZIH97wL4R85qH+RZwAjvK/Al1zrVNdHsnvpzsO8/MeEy7OSRqZaJpi
fIkEexl83YoIE1SQoeHqyynacvwz5xNB0D502iFqUHkGg+YwehoA/krHj53ZMMap
5H/SuIwHTumB5zUjywJOJuHm8xXtTsmiuyDmSnJb3u3XppYOkCZFbjL7mnwYsJGa
Mbk1mNRUPFzrp4ielJ/eXJGjvlSRyFQtYryGkV/Id6viwyV4vXxN+OEQ0u8itY1S
dh8+Ipy3Q7ejOc8rIETEP0TJqJ217kgIB/3wJ75EP7/3TAydlhD7Z760v1+IZQpS
4hyWdZh1beUd5Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:25 2024 by rpki-client on console-fra.rpki-client.org